Demo Mode
Run cloud-audit without AWS credentials to see the output format:
The demo command renders a sample account through the real engines: attack-chain correlation, root-cause grouping, breach-cost estimation and the security graph run on invented findings, so the output is exactly what a real scan with those findings would print: health score, attack chains, remediation plan, quick wins, findings with severity, and remediation guidance.
Save the sample as a scan report and explore it with every offline command:
cloud-audit demo --save demo.json
cloud-audit agent-blast --report demo.json # or simply: cloud-audit agent-blast --demo
cloud-audit blast-radius --report demo.json --resource arn:aws:iam::123456789012:role/support-bot-ticket-role
cloud-audit simulate --report demo.json --fix aws-iam-018
cloud-audit exposure --report demo.json
The sample includes a Bedrock Agent with three tools and a knowledge base, an AgentCore runtime, a gateway with a Lambda target and a remote MCP server target, and a code interpreter, so agent-blast has something to say.
This is useful for:
- Evaluating cloud-audit before connecting to AWS
- Demonstrating the tool to your team
- Testing report output formats
- CI/CD pipeline testing
The demo does not make any AWS API calls.